[exim] SASL / Realm / Multiple Domains?

Top Page
Delete this message
Reply to this message
Author: Unique_User
Date:  
To: exim-users
Subject: [exim] SASL / Realm / Multiple Domains?

Hi, I'm using Exim4 with SASL authentification. I use CRAM-MD5 and
DIGEST-MD5. The latter to support Outlook users because Outlook tries a
DIGEST-MD5 authentification by default and you can't tell it to use CRAM-MD5
or so.

Further, I handle several domains via my server.

The usernames are the email address of the user of the form
username@???

This is my Exim4 configuration for this:

  cram_md5_sasl_server:
        driver = cyrus_sasl
        public_name = CRAM-MD5
        server_realm = mail.mydomain.com
        server_set_id = $auth1


  digest_md5_sasl_server:
        driver = cyrus_sasl
        public_name = DIGEST-MD5
        server_realm = mydomain.com
        server_set_id = $auth1


Some questions:

1. I don't think that I need "server_realm" for CRAM-MD5, correct? If not,
what is it used for?

2. Is the realm stuff required for DIGEST-MD5?

3. I need to use two different calls to add user/passwords to the password
database depending on the user using Outlook or not:

a) Non Outlook users:saslpasswd2 -c usaer@???
b) Outlook users: saslpasswd2 -u mydomain.com -c username

But if the realm is hardcoded in the config file, how do I support Outlook
users from different domains?

The only change I see at the moment is, to make user names not based on the
email address but use a realm that is the same for all users.

Or am I missing something in the whole setup?
--
View this message in context: http://www.nabble.com/SASL---Realm---Multiple-Domains--tp20644252p20644252.html
Sent from the Exim Users mailing list archive at Nabble.com.